DeFi

DeFi Smart Contract Audit

A security audit built around the way DeFi actually fails: accounting drift, oracle assumptions, and incentives that pay attackers more than users.

Staking, AMMs, lending, vaults, and reward distribution on any EVM chain. Most DeFi losses are not exotic compiler bugs — they are legal transaction sequences nobody modelled. That is what this audit is aimed at.

Get a fixed quote Book a free assessment call

3 yrs: Auditing EVM smart contracts
M-01: Verified Code4rena finding
Critical: Vulnerability found in BulkSender
Live: Disclosures to Ronin protocols

Best fit for

AMMs, lending markets, and yield vaults heading for mainnet

Staking and reward contracts that will hold user deposits

Teams integrating external protocols whose assumptions they inherit

Protocols that changed their economics after their last audit

Focus areas

What I dig into on this kind of codebase

Reward & emission maths

Accumulator precision, reward-per-share drift, and the deposit/withdraw sequences that let one address farm everyone else's yield.

AMM & pricing invariants

Curve invariants, fee application order, rounding direction, and whether a swap can leave the pool worse off than it started.

Oracle manipulation

Spot-price dependence, TWAP windows, stale and negative price handling, and the flash-loan cost of moving your feed.

Liquidation & solvency

Bad-debt paths, incentive sizing, partial liquidation edge cases, and what the protocol does when a market gaps.

Token integration risk

Fee-on-transfer, rebasing, non-standard ERC-20 returns, and assumptions about decimals that break on the second chain.

Access & upgradeability

Admin keys, timelocks, proxy storage layout, and the emergency functions that quietly bypass every other control.

Deliverables

What you receive

Severity-rated findings report

Every issue written up with impact, likelihood, the exact affected lines, and a concrete remediation step you can hand straight to a developer.

Proof-of-concept exploits

Where a finding is exploitable I include a reproducible test, so your team can confirm the severity instead of debating it.

Prioritised fix list

Findings ordered by what actually threatens funds first, so a short remediation window is spent on the right things.

Follow-up support

Questions about a finding or a proposed patch get answered while you are still shipping the fix, not after the invoice clears.

Methodology

How the review runs

01
Scoping call
A short call to walk through your contracts, chain setup, and deadline. You leave with a fixed price and a delivery date, not an estimate.
02
Manual review
Line-by-line reading of the codebase, then targeted analysis of the parts that hold value: accounting, access control, reward maths, and external calls.
03
Exploit testing
I write proof-of-concept tests for the paths I think break, so findings arrive with evidence attached instead of a maybe.
04
Report & remediation
A written report with severity ratings, reproduction steps, and a concrete fix for each issue. Then I stay reachable while you patch.
05
Retest & sign-off
On the Audit + Retest tier I re-review your fixes and issue a final sign-off report you can share with your investors or community.

Pricing

Fixed prices, published up front

Final pricing is confirmed after a brief scoping call based on actual contract complexity. Payment is arranged before the review begins, and the agreed number is the number you pay.

Introductory rates

These are introductory prices while I build out my library of public audit reports. They go up after the next five engagements — the rate you book at is the rate you keep for that engagement.

Code Review

€250

Single contract review, up to 200 lines.

One contract, up to 200 lines
Manual line-by-line review
Findings list with severity ratings
Remediation guidance for every finding

3 day delivery · 1 revision

Start with Code Review

Protocol Audit

€900

Full multi-contract audit with a written report and severity ratings.

Multi-contract codebase
Business logic and economic attack paths
Proof-of-concept tests for exploitable findings
Written PDF report with severity ratings
Remediation guidance for every finding
Follow-up support on questions

7 day delivery · 3 revisions

Start with Protocol Audit

Audit + Retest

€1,600

Full audit plus a post-fix retest and a final sign-off report.

Everything in Protocol Audit
Post-fix retest of your patches
Final sign-off report you can publish
Extended follow-up support

10 day delivery · 5 revisions

Start with Audit + Retest

Larger codebase

From €2,000

Protocols above roughly 1,500 lines, multi-module systems, or anything needing a longer engagement.

Quoted on scope after a call. Same process, same deliverables, same guarantees — the timeline and price just match the size of the job.

Get a scoped quote

No-findings refund

If the review surfaces nothing above informational severity, you get a full refund and keep the report anyway. You should not have to pay to find out there was nothing to find.

The quoted price is the price

The number agreed on the scoping call is the number you pay. No hourly overruns, no scope-creep invoices, no surprise line items after delivery.

Confidential by default

Your code and findings are never published or shared without your written permission. NDA on request, signed before you send anything.

Ship your protocol without wondering what you missed

Send me your repo, chain, and deadline. You get a fixed price and a delivery date back — usually the same day.

Get a fixed quote Book a free assessment call

No obligation, and a full refund if the review finds nothing above informational severity. If your scope is outside what I cover, I will say so on the call.

FAQ

Questions before you book

What kinds of DeFi protocols do you audit?

AMMs and DEXes, lending markets, yield vaults, staking and reward distributors, token launches, and the periphery contracts that connect them. Solidity and Vyper on any EVM-compatible chain.

Do you review economic design, not just code?

Yes. Reward maths, fee routing, liquidation incentives, and oracle assumptions are reviewed as part of every DeFi engagement, because that is where most real losses originate rather than in syntax-level bugs.

How long does the review take?

Three days for a Code Review, seven for a Protocol Audit, and ten for Audit + Retest. The delivery date is agreed on the scoping call before any work starts.

When do I pay?

Pricing is confirmed after the scoping call and payment is arranged before the review begins. There are no hourly overruns — the agreed number is the number you pay.

Can I see an example report first?

Yes. The full BulkSender and KoinArcade reports are published on this site, so you can judge the depth and format before committing.